SC-300T00 Microsoft Identity and Access Administrator

Price
$2,380.00

Duration
4 Days

Delivery Methods
Virtual Instructor Led
Private Group

Add Exam Voucher
$165.00

Request More Information

Download Course Details

Course Details Only
Course Details & Schedule

Skip to Class Dates

Course Overview

The Microsoft Identity and Access Administrator course explores how to design, implement, and operate an organization’s identity and access management systems by using Azure AD. Learn to manage tasks such as providing secure authentication and authorization access to enterprise applications. You will also learn to provide seamless experiences and self-service management capabilities for all users. Finally, learn to create adaptive access and governance of your identity and access management solutions ensuring you can troubleshoot, monitor, and report on your environment. The Identity and Access Administrator may be a single individual or a member of a larger team. Learn how this role collaborates with many other roles in the organization to drive strategic identity projects. The end goal is to provide you knowledge to modernize identity solutions, to implement hybrid identity solutions, and to implement identity governance.

Who Should Attend?

This course is for the Identity and Access Administrators who are planning to take the associated certification exam, or who are performing identity and access administration tasks in their day-to-day job. This course would also be helpful to an administrator or engineer that wants to specialize in providing identity solutions and access management systems for Azure-based solutions; playing an integral role in protecting an organization.

United Training is committed to working as a partner with our clients. Choose United Training and take advantage of the following benefits.

Robust Public Enrollment Schedule. Enjoy access to hundreds of Guaranteed to Run dates across a diverse catalog of course titles.
Private Group Training. Let our world-class instructors come to you to deliver training at your place of business or we can present to your team online using our Virtual Instructor-Led Training platform.
Custom Training Solutions. Our subject matter experts can customize the class to specifically address the unique goals of your team.
Free Re-Takes. Most completed United Training courses carry our unbeatable Learning Guarantee. This guarantee allows students to repeat most United Training courses, if they are the same version, FREE OF CHARGE, within six months of completion of the courses. Exceptions: Cisco, Citrix, VMware, Red Hat, and courses provided by affiliated 3rd party training providers.

Learning Credits: Learning Credits can be purchased well in advance of your training date to avoid having to commit to specific courses or dates. Learning Credits allow you to secure your training budget for an entire year while eliminating the administrative headache of paying for individual classes. They can also be redeemed for a full year from the date of purchase. If you have previously purchased a Learning Credit agreement with United Training, you may use a portion of your agreement to pay for this class.

Corporate Tech Pass: Our Corporate Tech Pass includes unlimited attendance for a single person, in the following Virtual Instructor Led course types: Microsoft Office, Microsoft Technical, CompTIA, Project Management, SharePoint, ITIL, Certified Ethical Hacker, Certified Hacking Forensics Investigator, Java, Professional Development Courses and more. The full list of eligible course titles can be found at https://unitedtraining.com/eligible.

If you have questions about Learning Credits or our Corporate Tech Pass, please contact your Account Manager.

Course Prerequisites

Agenda

1 - Explore identity and Azure AD

Explain the identity landscape
Explore zero trust with identity
Discuss identity as a control plane
Explore why we have identity
Define identity administration
Contrast decentralized identity with central identity systems
Discuss identity management solutions
Explain Azure AD Business to Business
Compare Microsoft identity providers
Define identity licensing
Explore authentication
Discuss authorization
Explain auditing in identity

2 - Implement initial configuration of Azure Active Directory

Configure company brand
Configure and manage Azure Active Directory roles
Configure delegation by using administrative units
Analyze Azure AD role permissions
Configure and manage custom domains
Configure tenant-wide setting

3 - Create, configure, and manage identities

Create, configure, and manage users
Create, configure, and manage groups
Configure and manage device registration
Manage licenses
Create custom security attributes
Explore automatic user creation

4 - Implement and manage external identities

Describe guest access and Business to Business accounts
Manage external collaboration
Invite external users - individually and in bulk
Demo - manage guest users in Azure Active Directory
Manage external user accounts in Azure Active Directory
Manage external users in Microsoft 365 workloads
Implement cross-tenant access controls
Configure identity providers
Implement and manage Entra Verified ID

5 - Implement and manage hybrid identity

Plan, design, and implement Azure Active Directory Connect
Implement manage password hash synchronization (PHS)
Implement manage pass-through authentication (PTA)
Demo - Manage pass-through authentication and seamless single sign-on (SSO)
Implement and manage federation
Trouble-shoot synchronization errors
Implement Azure Active Directory Connect Health
Manage Azure Active Directory Connect Health

6 - Secure Azure Active Directory users with Multi-Factor Authentication

What is Azure AD Multi-Factor Authentication?
Plan your multi-factor authentication deployment
Configure multi-factor authentication methods

7 - Manage user authentication

Administer FIDO2 and passwordless authentication methods
Explore Authenticator app and OATH tokens
Implement an authentication solution based on Windows Hello for Business
Deploy and manage password protection
Configure smart lockout thresholds
Implement Kerberos and certificate-based authentication in Azure AD
Configure Azure AD user authentication for virtual machines

8 - Plan, implement, and administer Conditional Access

Plan security defaults
Plan Conditional Access policies
Implement Conditional Access policy controls and assignments
Test and troubleshoot Conditional Access policies
Implement application controls
Implement session management
Implement continuous access evaluation

9 - Manage Azure AD Identity Protection

Review identity protection basics
Implement and manage user risk policy
Monitor, investigate, and remediate elevated risky users
Implement security for workload identities
Explore Microsoft Defender for Identity

10 - Implement access management for Azure resources

Assign Azure roles
Configure custom Azure roles
Create and configure managed identities
Access Azure resources with managed identities
Analyze Azure role permissions
Configure Azure Key Vault RBAC policies
Retrieve objects from Azure Key Vault
Explore Entra Permissions Management (CloudKnox)

11 - Plan and design the integration of enterprise apps for SSO

Discover apps by using Microsoft Defender for Cloud Apps and Active Directory Federation Services app report
Configure connectors to apps
Design and implement app management roles
Configure pre-integrated gallery SaaS apps
Implement and manage policies for OAuth apps

12 - Implement and monitor the integration of enterprise apps for SSO

Implement token customizations
Implement and configure consent settings
Integrate on-premises apps by using Azure Active Directory application proxy
Integrate custom SaaS apps for single-sign-on
Implement application user provisioning
Monitor and audit access to Azure Active Directory integrated applications
Create and manage application collections

13 - Implement app registration

Plan your line of business application registration strategy
Implement application registration
Configure application permission
Implement application authorization
Manage and monitor application with App governance

14 - Plan and implement entitlement management

Define access packages
Configure entitlement management
Configure and manage connected organizations
Review per-user entitlements

15 - Plan, implement, and manage access review

Plan for access reviews
Create access reviews for groups and apps
Create and configure access review programs
Monitor access review findings
Automate access review management tasks
Configure recurring access reviews

16 - Plan and implement privileged access

Define a privileged access strategy for administrative users
Configure Privileged Identity Management for Azure resources
Plan and configure Privileged Access Groups
Analyze Privileged Identity Management audit history and reports
Create and manage emergency access accounts

17 - Monitor and maintain Azure Active Directory

Analyze and investigate sign-in logs to troubleshoot access issues
Review and monitor Azure Active Directory audit logs
Export logs to third-party security information and event management system
Analyze Azure Active Directory workbooks and reporting
Monitor security posture with Identity Secure Score